CVE-2012-2339

The CVE-2012-2339 entry concerns Drupal’s contributed Glossary module (versions 6.x-1.x prior to 6.x-1.8). Root cause: insufficient sanitization of taxonomy information in the glossary indicator feature, enabling Cross-Site Scripting (XSS) via unspecified vectors. Impact is XSS vulnerability for ...

SA-CONTRIB-2012-073 - Glossary - Cross-Site Scripting (XSS)

CVE: CVE-2012-2339 The glossary module scans posts for glossary terms, adding an indicator. By hovering over the indicator, users may learn the definition of that term. The module does not sufficiently sanitize the taxonomy information. This leaves sites vulnerable to Cross-Site Scripting attacks...